Attorney Docket No. AFDC-00300 
LISTING OF THE CLAIMS: 

What is claimed is: 

1 . (Currently Amended) A digital signature schomo method based on braid group 
conjugacy problem, parameters involved in this schomo method comprising a signatory (S), a 
signature verifying party (V), a message (M) needing signature, a braid group B n (/) divided 

into a left subgroup LB m (/)and a right subgroup RB n _ 2 _ m (l) 9 an integer n for a number of 
generators in the braid group B n (/) , an integer m for a number of generators in a left 
subgroup LB m (/) , an integer / for an upper bound of a length of a braid, a one way hash 
function h from bit sequence {0,1}* to braid groups B n (/) ; said signature schomo method 
comprising the following steps of: 

Step 1 .a signatory (S) selecting a braid x generated from the left subgroup LB m (/) , a 

second braid x ' generated from the braid group B n {l), and a third braid a generated from the 

braid group B n {l), and making them meet x = a~ l xa , moreover, with known x and x\ it 

being impossible to find a in calculation, and considering a braid pair (x\x) as a public key of 
signatory (S), a as a private key of signatory (S); 

Step 2. signatory (S) using hash function h for message (M) needing signature to get 
y = h(M) from the braid group B n (l); 

Step 3. generating a braid b from the right subgroup RB^^ (/)at random, then 
signing the message (M) with the private key a and a generated random braid b to obtain 
Sign (m) = a~ l byb~ l a ; and 

Step 4. the signatory (S) outputting message (M) and a signature of message (M) 
Sign(M). 

2. (Currently Amended) The digital signature schomo m ethod based on braid group 
conjugacy problem according to claim 1, wherein generating the public key braid pair (x f ,x) 
and the private key braid a of signatory (S) in said step 1 comprises the following steps of: 

Step la. selecting a distance d between system parameter braid groups public key 

pairs; 
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Step lb. representing x into a left canonical form x = £?n x n 2 - - - tt 1 ; 
Step lc. selecting a braid b at random to belong to a set B n (5 I) 
Step Id. calculating x — b~ l xb,a = & ; 

Step le. generating a bit at random, if 1, calculating x = decycling{x\ a = an l ; if not 

1, calculating x r = cycling{x'\a =ar u (7T 1 ); 

Step If. judging whether x' belongs to SSS(x) and whether l(x f ) < d, if all the 
conditions are yes, outputting the braid pairfx, x) as the public key, a as the private key; if 
either of them is not, performing step le. 

3. (Currently Amended) The digital signature scheme method based on braid group 
conjugacy problem according to claim 1 , wherein the process for obtaining 

y = h(M) g B n (/)by using the hash function h in said step 2 comprises the following steps of: 

Step 2 a, selecting an ordinary hash function H, with a length of output H(M) is / 

[log(2,n!)]> then dividing H(M) into / sections ^i||^ 2 ||- • -|^/ m equal at one time; 

Step 2b, corresponding Ri to a permutation braid Ai, then calculating 
h(M)=Al*A2...Al, that is the h(M) required. 

4. (Currently Amended) The digital signature scheme m ethod based on braid group 
conjugacy problem according to claim 1 , wherein a integer n for the number of generators in 
a braid group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an 
left subgroup n-m=4. 

5. -7. (Canceled) 

8. (Currently Amended) A method for digital signature scheme based on braid groups 
conjugacy problem and verifi^ationyiftg method thereof, parameters involved in this method 
comprising a signatory (S), a signature verifying party (V), a message (M) needing signature, 
a braid group B n (/) divided into a left subgroup LB m (/) and a right subgroup RB n _ t _ m (/) , an 

integer n for a number of generators in the braid group B n (/) , an integer m for a number of 

generators in the left subgroup LB m (/), an integer / for an upper bound of a length of a braid, 
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a one way hash function h mapped from bit sequence {0, 1 } * to braid groups B n (l); 
comprising the following steps of: 

Step 1 . the signatory(S) selecting a braid x generated from the left subgroup LB m (/), a 

second braid x ' generated from the braid group B n (/), and a third braid a generated from the 

braid group B n {l), and making them meet x = a~ l xa , moreover, with the known x and x\ it 

is impossible to find a in calculation, and considering a braid pair (x',x) as a public key of the 
signatory (6), a as a private key of signatory (S); 

Step 2. signatory (S) using a hash function h for message (M) needing signature to get 
y - h(Af) from the braid group B n (l); 

Step 3. generating a braid b from the right subgroup RB n ^ m (/)at random, then 
signing the message (M) with the private key a and the braid b generated randomly to obtain 
Sign (m) = a~ x byb~ x a ; 

Step 4. the signatory (S) outputting the message (M) and its signature Sign(M) to the 
signature verifying party (V)\ 

Step 5. the signature verifying party (V) obtaining the public key of signatory (S) after 
receiving the message (M) and the signature of message (M) Sign (M) transmitted from 
signatory (S); 

Step 6. calculating message M by employing a system parameter hash function A, to 
obtain y=h(M); 

Step 7. judging whether sign(M) and y are conjugate or not, if not, sign(M) is an 
illegal signature, the verification fails; if yes, perform step 8; and 

Step 8. calculating sign(M) x f and xy by using the obtained public key of signatory 
(S), and judging whether they are conjugate or not, if not, sign(M) is an illegal signature, and 
the verification fails; if yes, sign(M) is a legal signature of message (M). 

9. (Currently Amended) The digital signature schomo m ethod based on braid group 
conjugacy problem and verifying method thereof according to claim 8, wherein generating 
the public key braid pair (x',x) and private key braid a of signatory (S) in said step 1 
comprises the following steps of: 

Step la. selecting a distance d between system parameter braid groups public key 

pair; 
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Step lb. representing x into left canonial form x = t^n x n 2 ...7r 7 ; 
Step lc. selecting a braid b at random to belong to set B n (5 /) 
Step Id. calculating x = b~ l xb,a = & ; 

Step le. generating a bit at random, if 1, calculating x = decycling(x r \ a = an l ; if not 

I, calculating x = cycling{x\a = ar u (7T l ); and 

Step If. judging whether x' belongs to SSS(x) and whether l(x f ) < d, if all conditions 
are yes, outputting the braid pair fx, x r ) as the public key, a as the private key; if either of them 
is not, performing step le. 

10. (Currently Amended) The digital signature scheme m ethod based on braid group 
conjugacy problem and verifying method thereof according to claim 8, wherein the process 
for obtaining y - h(Af) e B n (/)by using hash function h in said step 2 comprises the 
following steps of: 

Step 2a. selecting an ordinary hash function H, with a length of its output H(M) is / 
[log(2, n!)], then dividing H(M) into / sections ^i|^ 2 |- • m equal at one time; and 

Step 2b. corresponding Ri to a permutation braid A i, then calculating 
h(M)=Al *A2...AU that is the h(M) required. 

I I . (Currently Amended) The digital signature schomo m ethod based on braid group 
conjugacy problem and verifying method thereof according to claim 8, wherein n for the 
number of the generation braids in the braid group is in the range of 20- 28, an upper value 
of the braid length is 1=3, d=4, and an left subgroup n-m=4. 

12. (Currently Amended) The digital signature schomo m ethod basod on braid group 
conjugacy problem and a verifying method thoroof according to claim 8, wherein algorithm 
BCD A is employed in judging whether sign(M) and y are conjugate or not in step 7 and 
judging whether sign(M) x f and xy are conjugate or not in step 8. 

13. (Currently Amended) The digital signature schomo m ethod based on braid group 
conjugacy problem according to claim 2, wherein a integer n for the number of generators in 
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a braid group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an 
left subgroup n-m=4. 

14. (Currently Amended) The digital signature scheme method based on braid group 
conjugacy problem according to claim 3, wherein a integer n for the number of generators in 
a braid group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an 
left subgroup n-m=4. 

1 5 . (Currently Amended) The digital signature schomo m ethod based on braid group 
conjugacy problem and verifying method thereof according to claim 9, wherein n for the 
number of the generation braids in the braid group is in the range of 20-28, an upper value of 
the braid length is 1=3, d=4, and an left subgroup n-m=4. 

16. (Currently Amended) The digital signature schomo m ethod basod on braid group 
conjugacy problem and verifying method thereof according to claim 10, wherein n for the 
number of the generation braids in the braid group is in the range of 20-28, an upper value of 
the braid length is 1=3, d=4, and an left subgroup n-m=4. 
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